{"metadata": {"vulnerability": "CVE-2022-3786", "count": 313, "kinds": {"milestone": 67, "sighting": 57, "kev": 0, "other": 189}}, "data": [{"timestamp": "2022-10-26T00:00:00Z", "date_only": false, "value": "2022-10-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2022-10-28T16:00:00Z", "date_only": false, "value": "2022-10-28T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-10-28T21:40:41Z", "date_only": false, "value": "2022-10-28T21:40:41+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "document.tracking.generator.date"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / openssl", "record": "CVE-2022-3786", "field": "containers.cna.datePublic"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": true, "value": "2022-11-01", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-3786", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2022:7288", "record": "ALSA-2022:7288", "field": "published"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-3786", "record": "UBUNTU-CVE-2022-3786", "field": "published"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-3786", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-11-01T12:00:00Z", "date_only": false, "value": "2022-11-01T12:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_rustsec \u00b7 RUSTSEC-2022-0065", "record": "RUSTSEC-2022-0065", "field": "published"}, {"timestamp": "2022-11-01T16:29:39.763Z", "date_only": false, "value": "2022-11-01T16:29:39.763Z", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "gsd.database_specific.OSV.published"}, {"timestamp": "2022-11-01T16:40:22Z", "date_only": false, "value": "2022-11-01T16:40:22Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2022:3843-1", "record": "SUSE-SU-2022:3843-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-11-01T16:40:22Z", "date_only": false, "value": "2022-11-01T16:40:22Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2022:3843-1", "record": "SUSE-SU-2022:3843-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-11-01T16:40:22Z", "date_only": false, "value": "2022-11-01T16:40:22Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2022:3843-1", "record": "SUSE-SU-2022:3843-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-11-01T16:40:22Z", "date_only": false, "value": "2022-11-01T16:40:22Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2022:3843-1", "record": "SUSE-SU-2022:3843-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-11-01T16:40:22Z", "date_only": false, "value": "2022-11-01T16:40:22Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2022:3843-1", "record": "SUSE-SU-2022:3843-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-11-01T16:54:00.550Z", "date_only": false, "value": "2022-11-01T16:54:00.550547Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "gsd.modified"}, {"timestamp": "2022-11-01T17:28:35Z", "date_only": false, "value": "2022-11-01T17:28:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/2723", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "2646065e-7033-4af4-a392-d9d559d42977", "content": "Nothing CRITICAL this time!\n\nOpenSSL has released patches for 2 new high-severity flaws (CVE-2022-3786 / CVE-2022-3602).\n\nhttps://thehackernews.com/2022/11/just-in-openssl-releases-patch-for-2.html\n\nCVE-2022-3602 has been downgraded from CRITICAL to HIGH as it cannot be exploited in most widely used architectures and platforms.", "url": "https://t.me/thehackernews/2723"}, {"timestamp": "2022-11-01T17:42:03Z", "date_only": false, "value": "2022-11-01T17:42:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/72672", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "2a28436f-9479-4bd0-8f52-bd977da25962", "content": "Critical OpenSSL 3.0 Update Released. Patches CVE-2022-3786, (Tue, Nov 1st)\n\nhttps://ift.tt/1tBJxob", "url": "https://t.me/ctinow/72672"}, {"timestamp": "2022-11-01T17:45:21Z", "date_only": false, "value": "2022-11-01T17:45:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H8JM-2X53-XHP5", "record": "GHSA-H8JM-2X53-XHP5", "field": "published"}, {"timestamp": "2022-11-01T18:14:16Z", "date_only": false, "value": "2022-11-01T18:14:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/BvLKt3rLrvV1MavTWtzUjCGDDZdoZfIDa5boheIt5lY5uHc", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "2390030b-240b-45fa-8aa4-d7418ebed0a9"}, {"timestamp": "2022-11-01T18:15:00Z", "date_only": false, "value": "2022-11-01T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H8JM-2X53-XHP5", "record": "GHSA-H8JM-2X53-XHP5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-11-01T18:15:00Z", "date_only": false, "value": "2022-11-01T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-11-01T18:15:11.047Z", "date_only": false, "value": "2022-11-01T18:15:11.047", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-3786", "record": "FKIE_CVE-2022-3786", "field": "published"}, {"timestamp": "2022-11-01T19:15:11Z", "date_only": false, "value": "2022-11-01T19:15:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityIL/16060", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "9795b5d6-e892-4f0c-9ef3-1c5f6b4f2413", "content": "\u05d6\u05d4 \u05dc\u05d0 \u05d4-log4j \u05d4\u05d1\u05d0, \u05d0\u05d1\u05dc \u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d1\u05e1\u05e4\u05e8\u05d9\u05d9\u05ea \u05d4\u05e7\u05d5\u05d3 \u05d4\u05e4\u05ea\u05d5\u05d7 \u05d4\u05e4\u05d5\u05e4\u05d5\u05dc\u05e8\u05d9\u05ea OpenSSL \u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05d4\u05d9\u05d5\u05dd, \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05e2\u05d3\u05db\u05df.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea CVE-2022-3602 \u05d5-\u00a0CVE-2022-3786 \u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05e0\u05e6\u05dc \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05d2\u05e8\u05e1\u05d4 3.0 \u05d5\u05de\u05e2\u05dc\u05d4 \u05d5\u05dc\u05d2\u05e8\u05d5\u05dd \u05dc\u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05d0\u05d5 \u05d1\u05d9\u05e6\u05d5\u05e2 DDoS, \u05d1\u05ea\u05d7\u05d9\u05dc\u05d4 \u05d3\u05d5\u05e8\u05d2\u05d5 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05db\u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d0\u05da \u05dc\u05d1\u05e1\u05d5\u05e3 \u05e8\u05de\u05ea \u05d4\u05d7\u05d5\u05de\u05e8\u05d4 \u05e9\u05d5\u05e0\u05ea\u05d4 \u05dc\u05e8\u05de\u05d4 \u05e0\u05de\u05d5\u05db\u05d4 \u05d9\u05d5\u05ea\u05e8.\n\n\u05d1\u05e9\u05dc\u05d1 \u05d6\u05d4 \u05e6\u05d5\u05d5\u05ea \u05d4\u05e4\u05e8\u05d5\u05d9\u05d9\u05e7\u05d8 \u05de\u05d5\u05e1\u05e8 \u05db\u05d9 \u05d4\u05d5\u05d0 \u05dc\u05d0 \u05de\u05db\u05d9\u05e8 \u05e0\u05d9\u05e6\u05d5\u05dc \u05e7\u05d9\u05d9\u05dd \u05dc\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d0\u05dc\u05d5 \u05d0\u05da \u05de\u05e4\u05e6\u05d9\u05e8 \u05dc\u05e2\u05d3\u05db\u05df \u05dc\u05d2\u05e8\u05e1\u05d4 3.0.7 \u05d1\u05d4 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e0\u05e1\u05d2\u05e8\u05d5.\n\nhttps://t.me/CyberSecurityIL/2338\n\nhttps://www.bleepingcomputer.com/news/security/openssl-fixes-two-high-severity-vulnerabilities-what-you-need-to-know/\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "url": "https://t.me/CyberSecurityIL/16060"}, {"timestamp": "2022-11-01T20:11:17Z", "date_only": false, "value": "2022-11-01T20:11:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/72712", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "572ab014-89f4-4559-892a-c2b149574172", "content": "High-severity OpenSSL vulnerabilities fixed (CVE-2022-3602, CVE-2022-3786)\n\nhttps://ift.tt/iLC580f", "url": "https://t.me/ctinow/72712"}, {"timestamp": "2022-11-01T20:23:02Z", "date_only": false, "value": "2022-11-01T20:23:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-11-01T20:46:42Z", "date_only": false, "value": "2022-11-01T20:46:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/72717", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "4728e7d7-9cb3-4f72-ad11-db6fe3cb98aa", "content": "What the OpenSSL Vulnerabilities Are\u2026and Aren\u2019t (CVE-2022-3786 & CVE-2022-3602)\n\nhttps://ift.tt/Ys34Elk", "url": "https://t.me/ctinow/72717"}, {"timestamp": "2022-11-01T21:19:05Z", "date_only": false, "value": "2022-11-01T21:19:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/52409", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a4896714-0327-48a5-88ed-3e70e7fe1050", "content": "\u203c CVE-2022-3786 \u203c\n\nA buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects. Fixed in OpenSSL 3.0.7 (Affected 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/52409"}, {"timestamp": "2022-11-01T23:00:00Z", "date_only": false, "value": "2022-11-01T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-11-01T23:00:00Z", "date_only": false, "value": "2022-11-01T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-11-01T23:00:00Z", "date_only": false, "value": "2022-11-01T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-985", "record": "CERTFR-2022-AVI-985", "field": "last_revision_date"}, {"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-985", "record": "CERTFR-2022-AVI-985", "field": "initial_release_date"}, {"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-985", "record": "CERTFR-2022-AVI-985", "field": "revisions.0.revision_date"}, {"timestamp": "2022-11-02T06:00:00Z", "date_only": false, "value": "2022-11-02T06:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://msrc.microsoft.com/blog/2022/11/microsoft-guidance-related-to-openssl-risk-cve-2022-3786-and-cve-2202-3602/", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "4d44e1c5-ee8e-4775-9706-3461abba0f57", "url": "https://msrc.microsoft.com/blog/2022/11/microsoft-guidance-related-to-openssl-risk-cve-2022-3786-and-cve-2202-3602/"}, {"timestamp": "2022-11-02T09:51:28Z", "date_only": false, "value": "2022-11-02T09:51:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/72828", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "66478a5c-b85d-480b-bdd6-665cc296d344", "content": "Security Advisory for OpenSSL Vulnerabilities CVE-2022-3602 & CVE-2022-3786\n\nhttps://ift.tt/upNe8F5", "url": "https://t.me/ctinow/72828"}, {"timestamp": "2022-11-02T12:14:42Z", "date_only": false, "value": "2022-11-02T12:14:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/561", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a3ccb801-0a52-498d-9ec4-45a3289988a9", "content": "\u200b\u200bCVE\u22122022-3602\n\nThis document and repository is a write-up of CVE\u22122022-3602, a punycode buffer overflow issue in OpenSSL. It's an \"anti-POC\" (the issue does not appear to exploitable) intended for folks who maintain their own OpenSSL builds and for compiler maintainers.\n\nThere is a seperate CVE in the same release, CVE-2022-3786, which also leads to buffer overflows but an attacker can't control the content in that case. There is no reproduction for that issue here, but that issue can lead to a Denial of Service due to crash.\n\nCrashes and Buffer over\ufb02lows are never good and if you are using OpenSSL 3.0.x, it is prudent to update as soon as possible.\n\nhttps://github.com/colmmacc/CVE-2022-3602\n\n#cve #poc", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/561"}, {"timestamp": "2022-11-02T13:35:04Z", "date_only": false, "value": "2022-11-02T13:35:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3651", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a5aee9ae-1268-42fe-a4b9-3d45781e2932", "content": "\u0428\u0438\u0440\u043e\u043a\u043e \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u0438\u043d\u0444\u043e\u0441\u0435\u043a\u0435 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f OpenSSL \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\nCVE-2022-3602 \u0438 CVE-2022-3786 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 OpenSSL \u0432\u0435\u0440\u0441\u0438\u0438 3.0.0 \u0438 \u0432\u044b\u0448\u0435 \u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 OpenSSL 3.0.7.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2022-3602 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 4-\u0431\u0430\u0439\u0442\u043e\u0432\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0441\u0442\u0435\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0438\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a2022-3602 \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0434\u0440\u0443\u0433\u0430\u044f  CVE-2022-3786 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0438 CVE-20\u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043d\u0438 \u043e \u043a\u0430\u043a\u043e\u043c \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0433 \u0431\u044b \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u0438 \u0443 \u043d\u0438\u0445 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u043e\u0439\u00a0Open SSL, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0418\u0422-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b\u00a0\u0441 25 \u043e\u043a\u0442\u044f\u0431\u0440\u044f\u00a0\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u044b\u00a0\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 OpenSSL 3.0.7.\n\nOpenSSL \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u0442\u0440\u0435\u0431\u0443\u044f \u043e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 TLS, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 TLS \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0425\u043e\u0442\u044f \u0438 \u043d\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u043e \u043e\u0446\u0435\u043d\u043a\u0443 CVE-2022-3602 \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0430 \u0434\u043e \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438\u00a0\u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b OpenSSL 3.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0443\u0436\u0435 \u043f\u0440\u0438\u0440\u0430\u0432\u043d\u044f\u043b\u0438 \u0431\u0430\u0433\u0438 \u043a \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439\u043e\u0441\u0442\u0438.\n\nCVE-2022-\u0438\u0437 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 1 793 000 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u043d\u043b\u0430\u0439\u043d-\u0445\u043e\u0441\u0442\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 7000 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\nShodan\u00a0\u0434\u0430\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432 16 000 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 OpenSSL.\n\n\u041f\u043e\u0441\u043b\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, AWS, GCP, Azure, OCI \u0438 Alibaba Cloud) \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Wiz.io \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043b\u0438\u0448\u044c 1,5% \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 OpenSSL.\n\n\u0412 \u0438\u0442\u043e\u0433\u0435: \u043c\u043d\u043e\u0433\u043e \u0448\u0443\u043c\u0430 \u0438\u0437 \u043d\u0438\u0447\u0435\u0433\u043e.", "url": "https://t.me/true_secator/3651"}, {"timestamp": "2022-11-02T15:02:30Z", "date_only": false, "value": "2022-11-02T15:02:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/3165", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "3cea798a-75fa-4b72-b641-70dbb4f5316c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aOperational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3\nURL\uff1ahttps://github.com/NCSC-NL/OpenSSL-2022\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3165"}, {"timestamp": "2022-11-02T15:48:10.308Z", "date_only": false, "value": "2022-11-02T15:48:10.308Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "gsd.database_specific.OSV.modified"}, {"timestamp": "2022-11-02T16:12:00Z", "date_only": false, "value": "2022-11-02T16:12:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/72926", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "1ef985ed-ddad-4c2c-84ab-483c7d9d4d92", "content": "High-severity OpenSSL vulnerabilities fixed (CVE-2022-3602, CVE-2022-3786)\n\nhttps://ift.tt/HB871tA", "url": "https://t.me/ctinow/72926"}, {"timestamp": "2022-11-02T18:08:04Z", "date_only": false, "value": "2022-11-02T18:08:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/567", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "b9f88f5e-f7b4-467d-bd98-d0c718f2142a", "content": "\u200b\u200bCVE\u22122022-3602\n\nThis document and repository is a write-up of CVE\u22122022-3602, a punycode buffer overflow issue in OpenSSL. It's an \"anti-POC\" (the issue does not appear to exploitable) intended for folks who maintain their own OpenSSL builds and for compiler maintainers.\n\nThere is a seperate CVE in the same release, CVE-2022-3786, which also leads to buffer overflows but an attacker can't control the content in that case. There is no reproduction for that issue here, but that issue can lead to a Denial of Service due to crash.\n\nCrashes and Buffer over\ufb02lows are never good and if you are using OpenSSL 3.0.x, it is prudent to update as soon as possible.\n\nhttps://github.com/colmmacc/CVE-2022-3602", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/567"}, {"timestamp": "2022-11-02T18:46:46Z", "date_only": false, "value": "2022-11-02T18:46:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-11-02T18:46:46Z", "date_only": false, "value": "2022-11-02T18:46:46+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-11-02T18:46:46Z", "date_only": false, "value": "2022-11-02T18:46:46+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-11-02T19:26:36Z", "date_only": false, "value": "2022-11-02T19:26:36+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-11-02T21:46:40Z", "date_only": false, "value": "2022-11-02T21:46:40Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H8JM-2X53-XHP5", "record": "GHSA-H8JM-2X53-XHP5", "field": "modified"}, {"timestamp": "2022-11-02T22:16:40Z", "date_only": false, "value": "2022-11-02T22:16:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/73035", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "54ef010c-3357-43ac-9565-86d8f5010e35", "content": "CVE ALERT! OpenSSL CVE-2022-3786 and CVE-2022-3602: X.509 Email Address Buffer Overflows\n\nhttps://ift.tt/4kYjHWb", "url": "https://t.me/ctinow/73035"}, {"timestamp": "2022-11-02T23:00:00Z", "date_only": false, "value": "2022-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-11-03T00:00:00Z", "date_only": false, "value": "2022-11-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-989", "record": "CERTFR-2022-AVI-989", "field": "last_revision_date"}, {"timestamp": "2022-11-03T00:00:00Z", "date_only": false, "value": "2022-11-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-990", "record": "CERTFR-2022-AVI-990", "field": "last_revision_date"}, {"timestamp": "2022-11-03T00:00:00Z", "date_only": false, "value": "2022-11-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-989", "record": "CERTFR-2022-AVI-989", "field": "initial_release_date"}, {"timestamp": "2022-11-03T00:00:00Z", "date_only": false, "value": "2022-11-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-990", "record": "CERTFR-2022-AVI-990", "field": "initial_release_date"}, {"timestamp": "2022-11-03T00:00:00Z", "date_only": false, "value": "2022-11-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-989", "record": "CERTFR-2022-AVI-989", "field": "revisions.0.revision_date"}, {"timestamp": "2022-11-03T00:00:00Z", "date_only": false, "value": "2022-11-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-990", "record": "CERTFR-2022-AVI-990", "field": "revisions.0.revision_date"}, {"timestamp": "2022-11-03T04:56:43Z", "date_only": false, "value": "2022-11-03T04:56:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1136", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a1f6f226-26cf-4a94-8b97-cb57b2b8ebaf", "content": "cve-2022-3602 \ncve-2022-3786 - openssl-poc\nDownload POC\n\n#openssl #poc", "url": "https://t.me/proxy_bar/1136"}, {"timestamp": "2022-11-03T05:49:12Z", "date_only": false, "value": "2022-11-03T05:49:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/10366", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "e70b783c-d352-40f5-9189-31c7ef0732db", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2022-3786; DoS: Buffer overflow occurs in the ossl_a2ulabel vulnerable function. When this function meets a Punycode part followed by a dot character (\".\") it also appends \".\" to the output buffer even if it overflows its size.\n\nhttps://twitter.com/_CPResearch_/status/1587741086340075521", "url": "https://t.me/cKure/10366"}, {"timestamp": "2022-11-03T13:03:36Z", "date_only": false, "value": "2022-11-03T13:03:36+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-11-03T20:12:42Z", "date_only": false, "value": "2022-11-03T20:12:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2022-11-03T23:06:27Z", "date_only": false, "value": "2022-11-03T23:06:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/73364", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "5a28d827-a7cb-42e9-a73a-45a5ca6a7ee2", "content": "CVE-2022-3602 and CVE-2022-3786 OpenSSL Vulnerabilities: Scanning Container Images\n\nhttps://ift.tt/nDLZdmp", "url": "https://t.me/ctinow/73364"}, {"timestamp": "2022-11-04T06:57:51Z", "date_only": false, "value": "2022-11-04T06:57:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BlueRedTeam/2428", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "1b0ac21e-116d-47f1-853a-f1152ed5c28a", "content": "#CVE-2022\n\nOperational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3\n\nhttps://github.com/NCSC-NL/OpenSSL-2022\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2428"}, {"timestamp": "2022-11-04T07:28:32.835Z", "date_only": false, "value": "2022-11-04T07:28:32.835Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / openssl", "record": "CVE-2022-3786", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-11-04T08:00:05Z", "date_only": false, "value": "2022-11-04T08:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TopCyberTechNews/192", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "d0d5d644-f0cd-43e7-91c5-f471b0c00c65", "content": "Top Security News for 04/11/2022\n\nStopping C2 communications in human-operated ransomware through network protection\nhttps://www.microsoft.com/en-us/security/blog/2022/11/03/stopping-c2-communications-in-human-operated-ransomware-through-network-protection/ \n\nResearchers Discover Link In Tooling Between FIN7 And Black Basta Ransomware Group\nhttps://packetstormsecurity.com/news/view/34003/Researchers-Discover-Link-In-Tooling-Between-FIN7-And-Black-Basta-Ransomware-Group.html \n\nCombining Powershell Scripts\nhttps://0x00sec.org/t/combining-powershell-scripts/31978 \n\nWhy Identity & Access Management Governance is a Core Part of Your SaaS Security\nhttps://thehackernews.com/2022/11/why-identity-access-management.html \n\nCVE-2022-3602 & CVE-2022-3786 - OSS tools to detect susceptibility to the recent OpenSSL issues\nhttps://www.reddit.com/r/netsec/comments/ykzip5/cve20223602_cve20223786_oss_tools_to_detect/ \n\nNuke Experts Are Horrified by Biden\u2019s New \u2018Nuclear Posture Review\u2019\nhttps://www.vice.com/en_us/article/n7zk9w/nuke-experts-are-horrified-by-bidens-new-nuclear-posture-review \n\nWhy Did the OpenSSL Punycode Vulnerability Happen\nhttps://www.reddit.com/r/netsec/comments/ylgnxb/why_did_the_openssl_punycode_vulnerability_happen/ \n\nReverse Branch Target Buffer Poisoning - new ASLR bypass technique using CPU vulnerabilities [PDF]\nhttps://www.reddit.com/r/netsec/comments/yls06p/reverse_branch_target_buffer_poisoning_new_aslr/ \n\nThreat Model Examples\nhttps://www.reddit.com/r/netsec/comments/yl7xx0/threat_model_examples/ \n\nCyberspace \u2018a battleground\u2019 as reports of cybercrime in Australia jump 13%\nhttps://www.theguardian.com/australia-news/2022/nov/04/cyberspace-a-battleground-as-reports-of-cybercrime-in-australia-jump-13 \n\n    \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/192"}, {"timestamp": "2022-11-04T15:01:29Z", "date_only": false, "value": "2022-11-04T15:01:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/breachdetector/135818", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "1bd883d5-cdf5-4540-bc76-2b0ca3b9bcd2", "content": "{\n  \"Source\": \"https://t.me/documentors\",\n  \"Content\": \"cve-2022-3602 & cve-2022-3786PoC.zip 4.9 MB \ud83d\udca5Yet another PoC for OpenSSL vulnerabilities(CVE-2022-3602 & CVE-2022-3786) \ud83d\udcc4For Questions and Purchase and place Orders Contact us: \ud83d\udece @darkamo https://t.me/documentors\", \n  \"author\": \"\u2693\ufe0f\ud835\udd07\ud835\udd2c\ud835\udd20\ud835\udd32\ud835\udd2a\ud835\udd22\ud835\udd2b\ud835\udd31\ud835\udd2c\ud835\udd2f\",\n  \"Detection Date\": \"04 Nov 2022\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "url": "https://t.me/breachdetector/135818"}, {"timestamp": "2022-11-04T18:40:16Z", "date_only": false, "value": "2022-11-04T18:40:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2022-11-06T23:00:00Z", "date_only": false, "value": "2022-11-06T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-11-07T13:16:19Z", "date_only": false, "value": "2022-11-07T13:16:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3668", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "5efa9e6a-ebdb-4210-8dc3-7b3decec1b29", "content": "\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0440\u044f\u0434 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0432\u0435\u0431-\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u0430\u043c\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Cisco Identity Services Engine (ISE).\n\nISE \u2014 \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-20961, \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443 \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u043e\u0439 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 (CSRF) \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041a\u0430\u043a \u043f\u0438\u0448\u0443\u0442 \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CSRF \u0434\u043b\u044f \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0431\u0430\u0433\u043e\u0439, \u0443\u0431\u0435\u0434\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u043e\u0433\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-20956 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7,1) \u0432 \u0442\u043e\u043c \u0436\u0435 ISE \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0433\u0434\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0443, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0441\u043f\u0438\u0441\u043e\u043a, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443 \u043d\u0435\u0433\u043e \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0421\u043e \u0441\u043b\u043e\u0432 Cisco PSIRT, \u0432 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0430\u043a\u0436\u0435 \u0418\u0422-\u0433\u0438\u0433\u0430\u043d\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL Injection CVE-2022-20867 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 CVE-2022-20868 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco ESA, Cisco Secure Email \u0438 Web Manager Next Generation Management.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u043e\u0447\u0435\u0433\u043e Cisco \u043f\u0440\u0438\u0441\u0442\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043f\u0440\u0435\u0441\u043b\u043e\u0432\u0443\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 OpenSSL CVE-2022-3602 \u0438 CVE-2022-3786, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435.", "url": "https://t.me/true_secator/3668"}, {"timestamp": "2022-11-08T20:57:38Z", "date_only": false, "value": "2022-11-08T20:57:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2022-11-08T23:00:00Z", "date_only": false, "value": "2022-11-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2022-11-10T21:29:01Z", "date_only": false, "value": "2022-11-10T21:29:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/578", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "c297048a-cfbc-4148-8fb1-c30a530924cb", "content": "\u062a\u06a9\u0645\u06cc\u0644\u06cc:\n\n\u062f\u0631 \u0622\u062e\u0631\u06cc\u0646 \u0628\u0647 \u0631\u0648\u0632\u0633\u0627\u0646\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062c\u062f\u06cc\u062f\u062a\u0631\u06cc\u0646 \u0636\u0639\u0641 \u0627\u0645\u0646\u06cc\u062a\u06cc OpenSSL \u06a9\u0647 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 CVE-2022-3786 \u0648 CVE-2022-3602 \u0645\u06cc \u0628\u0627\u0634\u062f\u060c \u062f\u0631\u062c\u0647 \u0627\u0647\u0645\u06cc\u062a \u0622\u0646 \u0627\u0632 Critical \u0628\u0647 High \u06a9\u0627\u0647\u0634 \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f.\n\u0647\u0645\u0686\u0646\u06cc\u0646 \u062a\u0648\u0636\u06cc\u062d\u0627\u062a \u062a\u06a9\u0645\u06cc\u0644\u06cc \u0648 \u0641\u0646\u06cc \u062f\u0631 \u062e\u0635\u0648\u0635 \u0627\u06cc\u0646 \u062f\u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0627\u0632 \u062c\u0646\u0633 Buffer Overflow \u0627\u0633\u062a \u0646\u06cc\u0632 \u0628\u0631\u0627\u06cc \u0639\u0644\u0627\u0642\u0647 \u0645\u0646\u062f\u0627\u0646 \u0627\u0631\u0627\u0626\u0647 \u0634\u062f.\n\u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0628\u0647 \u0633\u0648\u0627\u0644\u0627\u062a \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0648 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0647\u0634 \u062e\u0637\u0631 \u06cc\u0627 \u0631\u06cc\u0633\u06a9 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u067e\u0631\u062f\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\u062c\u0632\u0626\u06cc\u0627\u062a \u06a9\u0627\u0645\u0644: https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/", "url": "https://t.me/MrVGunz/578"}, {"timestamp": "2022-11-10T23:00:00Z", "date_only": false, "value": "2022-11-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2022-11-12T11:35:26Z", "date_only": false, "value": "2022-11-12T11:35:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pDlVR56iY6rypUkhFLaqLdVNy7SeZGDsal8kYSFgYj64xD0", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "123baac5-32d9-4b22-ad8f-1c6db93a2114"}, {"timestamp": "2022-11-12T16:32:01Z", "date_only": false, "value": "2022-11-12T16:32:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/4297", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "ea100f60-21f4-4e79-a03b-36b39ba1b1a5", "content": "cve-2022-3602 \ncve-2022-3786 / openssl-poc\n\nGithub \n\n#Openssl #poc \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4297"}, {"timestamp": "2022-11-14T08:56:42Z", "date_only": false, "value": "2022-11-14T08:56:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/328", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "3a2203f6-77e5-4279-91b0-e1365694e551", "content": "https://github.com/rbowes-r7/cve-2022-3602-and-cve-2022-3786-openssl-poc  \n#github", "url": "https://t.me/CNArsenal/328"}, {"timestamp": "2022-11-17T23:00:00Z", "date_only": false, "value": "2022-11-17T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2022-11-18T15:57:59Z", "date_only": false, "value": "2022-11-18T15:57:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3455", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "dac63189-e868-4fc7-9950-4885ebdf14b4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aOperational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3\nURL\uff1ahttps://github.com/NCSC-NL/OpenSSL-2022\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3455"}, {"timestamp": "2022-11-21T00:00:00Z", "date_only": false, "value": "2022-11-21T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1041", "record": "CERTFR-2022-AVI-1041", "field": "last_revision_date"}, {"timestamp": "2022-11-21T00:00:00Z", "date_only": false, "value": "2022-11-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1041", "record": "CERTFR-2022-AVI-1041", "field": "initial_release_date"}, {"timestamp": "2022-11-21T00:00:00Z", "date_only": false, "value": "2022-11-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1041", "record": "CERTFR-2022-AVI-1041", "field": "revisions.0.revision_date"}, {"timestamp": "2022-11-23T20:23:17Z", "date_only": false, "value": "2022-11-23T20:23:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2022-11-23T20:23:17Z", "date_only": false, "value": "2022-11-23T20:23:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-11-23T20:23:22Z", "date_only": false, "value": "2022-11-23T20:23:22+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.generator.date"}, {"timestamp": "2022-11-25T15:19:02Z", "date_only": false, "value": "2022-11-25T15:19:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BlueRedTeam/2489", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "87c127c9-97b3-431b-a937-ff3a2c1ab12a", "content": "#CVE-2022\nOperational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3\n\nhttps://github.com/NCSC-NL/OpenSSL-2022\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2489"}, {"timestamp": "2022-11-28T19:10:49Z", "date_only": false, "value": "2022-11-28T19:10:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/572", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "94c97b28-4879-4c47-9462-1182bc40b97f", "content": "\u200b\u200bcve-2022-3602-and-cve-2022-3786-openssl-poc\n\nPosted our technical analyses of the two OpenSSL vulns published yesterday, along with a simple PoC repo.\n\n\u25ab\ufe0f CVE-2022-3602: https://attackerkb.com/topics/GMp2yGvZCw/cve-2022-3602/rapid7-analysis\n\u25ab\ufe0f CVE-2022-3786: https://attackerkb.com/topics/CKTqMzGksY/cve-2022-3786/rapid7-analysis\n\nhttps://github.com/rbowes-r7/cve-2022-3602-and-cve-2022-3786-openssl-poc\n\n#cve #poc", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/572"}, {"timestamp": "2022-12-07T18:25:02Z", "date_only": false, "value": "2022-12-07T18:25:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/38006", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "46e28e6e-45f4-4120-9a0b-ca7b81081695", "content": "https://github.com/cybersecurityworks553/CVE-2022-3602-and-CVE-2022-3786", "url": "https://t.me/intelexch/38006"}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1087", "record": "CERTFR-2022-AVI-1087", "field": "last_revision_date"}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1087", "record": "CERTFR-2022-AVI-1087", "field": "initial_release_date"}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1087", "record": "CERTFR-2022-AVI-1087", "field": "revisions.0.revision_date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-12", "record": "ICSA-22-349-12", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1094", "record": "CERTFR-2022-AVI-1094", "field": "last_revision_date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": true, "value": "2022-12-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1094", "record": "CERTFR-2022-AVI-1094", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-22-349-12", "record": "ICSA-22-349-12", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1094", "record": "CERTFR-2022-AVI-1094", "field": "revisions.0.revision_date"}, {"timestamp": "2022-12-15T00:00:00Z", "date_only": false, "value": "2022-12-15T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-10", "record": "ICSA-22-349-10", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-15T00:00:00Z", "date_only": false, "value": "2022-12-15T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-22-349-10", "record": "ICSA-22-349-10", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-12-15T09:26:43Z", "date_only": false, "value": "2022-12-15T09:26:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/671", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "0a54c542-a339-4702-ab5a-ee46c2c1f4b6", "content": "\u063a\u0648\u0644\u200c\u0647\u0627\u06cc \u0635\u0646\u0639\u062a\u06cc \u0632\u06cc\u0645\u0646\u0633 \u0648 \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 \u0628\u06cc\u0634 \u0627\u0632 140 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0628\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u062f\u0631 \u062f\u0633\u0627\u0645\u0628\u0631 2022 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f.\n\u0632\u06cc\u0645\u0646\u0633 80 \u0646\u0642\u0635 OpenSSL \u0648 OpenSSH \u0631\u0627 \u062f\u0631 \u0633\u0648\u0626\u06cc\u0686 \u0647\u0627 \u0631\u0641\u0639 \u06a9\u0631\u062f\n\n\u0632\u06cc\u0645\u0646\u0633\n\n\u0637\u0628\u0642 \u0645\u0639\u0645\u0648\u0644\u060c \u0632\u06cc\u0645\u0646\u0633 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0628\u06cc\u0634\u062a\u0631\u06cc \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f \u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u0628\u06cc\u0634\u062a\u0631\u06cc \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0628\u0647 \u0637\u0648\u0631 \u062e\u0627\u0635\u060c \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a 20 \u062a\u0648\u0635\u06cc\u0647 \u062c\u062f\u06cc\u062f \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0647 \u062d\u062f\u0648\u062f 140 \u062d\u0641\u0631\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u067e\u0631\u062f\u0627\u062e\u062a\u0647 \u0627\u0633\u062a.\n\n\u06cc\u06a9\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0631\u0627 \u062f\u0631 \u0645\u0648\u0631\u062f \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0628\u06cc\u0634 \u0627\u0632 80 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc OpenSSL \u0648 OpenSSH \u06a9\u0647 \u0628\u0631 \u0633\u0648\u0626\u06cc\u0686\u200c\u0647\u0627\u06cc Scalance X-200RNA \u0622\u0646 \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f\u060c \u0622\u06af\u0627\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f . CVE \u0647\u0627\u06cc \u0630\u06a9\u0631 \u0634\u062f\u0647 \u062f\u0631 \u0645\u062d\u062f\u0648\u062f\u0647 \u0645\u0634\u0627\u0648\u0631\u0647 \u0628\u06cc\u0646 \u0633\u0627\u0644 \u0647\u0627\u06cc 2003 \u0648 2019. \u0627\u06cc\u0646 \u062a\u0646\u0647\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0627\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631\u062c\u0647 \u0628\u0646\u062f\u06cc \u0634\u062f\u062a \u06a9\u0644\u06cc \u0622\u0646 \"\u0628\u062d\u0631\u0627\u0646\u06cc\" \u0627\u0633\u062a.\n\n\u0647\u0645\u06cc\u0646 \u0633\u0648\u0626\u06cc\u0686 \u0647\u0627 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0634\u0634 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0645\u062a\u0648\u0633\u0637 \u200b\u200b\u0648 \u0628\u0627\u0644\u0627 \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u0646\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0627\u062a \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0628\u06cc\u0646 \u0633\u0627\u06cc\u062a\u06cc (XSS)\u060c \u062d\u0645\u0644\u0627\u062a \u0627\u0646\u06a9\u0627\u0631 \u0633\u0631\u0648\u06cc\u0633 (DoS) \u0648 \u0631\u0628\u0648\u062f\u0646 \u062c\u0644\u0633\u0647 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u0646\u062f.\n\n\u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0627\u06cc\u0646\u060c \u0632\u06cc\u0645\u0646\u0633 \u0628\u0647 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0627\u0637\u0644\u0627\u0639 \u062f\u0627\u062f \u06a9\u0647 \u0628\u0631\u062e\u06cc \u0627\u0632 \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u0634 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc OpenSSL \u0627\u062e\u06cc\u0631\u0627\u064b \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0628\u0627 \u0646\u0627\u0645\u200c\u0647\u0627\u06cc CVE-2022-3602 \u0648 CVE-2022-3786 \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f. CVE-2022-3602 \u062f\u0631 \u0627\u0628\u062a\u062f\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \"\u0628\u062d\u0631\u0627\u0646\u06cc\" \u0637\u0628\u0642\u0647 \u0628\u0646\u062f\u06cc \u0634\u062f\u060c \u0627\u0645\u0627 \u0628\u0639\u062f\u0627 \u0628\u0647 \"\u0628\u0627\u0644\u0627\" \u062a\u0646\u0632\u0644 \u06cc\u0627\u0641\u062a .\n\n\u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0647\u0645\u0686\u0646\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc\u06cc \u0631\u0627 \u06a9\u0647 \u0627\u0632 \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u0634 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u062f\u0631 \u0645\u0648\u0631\u062f \u0645\u0634\u06a9\u0644\u0627\u062a \u0634\u062f\u06cc\u062f \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a Sicam PAS\u060c Apogee/Talon\u060c Mendix\u060c Teamcenter Visualization\u060c JT2Go\u060c Scalance\u060c Simatic\u060c Parasolid\u060c Ruggedcom \u0648 Simcenter STAR-CCM+ \u0645\u0637\u0644\u0639 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a\u060c \u062d\u0645\u0644\u0627\u062a DoS\u060c \u0627\u0641\u0634\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0634\u0648\u062f.\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0628\u0627 \u0634\u062f\u062a \u0645\u062a\u0648\u0633\u0637 \u200b\u200b\u062f\u0631 \u0633\u0631\u0648\u0631 PLM \u0632\u06cc\u0645\u0646\u0633 (\u062f\u06cc\u06af\u0631 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0646\u0645\u06cc\u200c\u0634\u0648\u062f)\u060c \u067e\u0627\u0646\u0644\u200c\u0647\u0627\u06cc \u0645\u06cc\u062f\u0627\u0646 Apogee/Talon\u060c \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc Simatic WinCC OA\u060c Siprotec 5 \u0648 \u0631\u0627\u0647\u200c\u062d\u0644 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0686\u0631\u062e\u0647 \u0639\u0645\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc Polarion \u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u0646\u0642\u0635\u200c\u0647\u0627\u06cc \u0628\u0627 \u0634\u062f\u062a \u0645\u062a\u0648\u0633\u0637 \u200b\u200b\u0631\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0627\u062a XSS\u060c \u062d\u0645\u0644\u0627\u062a DoS \u0648 \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f.\n\n\u0632\u06cc\u0645\u0646\u0633 \u0648\u0635\u0644\u0647 \u0647\u0627\u06cc\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0628\u0631\u062e\u06cc \u0627\u0632 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u060c \u0627\u0645\u0627 \u0628\u0631\u0627\u06cc \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0622\u0646\u0647\u0627 \u0627\u0635\u0644\u0627\u062d\u0627\u062a\u06cc \u062f\u0631 \u0622\u06cc\u0646\u062f\u0647 \u0645\u0646\u062a\u0634\u0631 \u062e\u0648\u0627\u0647\u062f \u0634\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u0645\u06cc\u0627\u0646\u060c \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u06a9\u0627\u0647\u0634\u06cc \u0648 \u0631\u0627\u0647\u200c\u062d\u0644\u200c\u0647\u0627\u06cc\u06cc \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9\n\n\u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 \u062a\u0646\u0647\u0627 \u0633\u0647 \u062a\u0648\u0635\u06cc\u0647 \u062c\u062f\u06cc\u062f \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0634\u0634 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u067e\u0648\u0634\u0634 \u0645\u06cc \u062f\u0647\u062f.\n\n\u0628\u0631 \u0627\u0633\u0627\u0633 \u0646\u0645\u0631\u0627\u062a CVSS\u060c \u0645\u0647\u0645\u062a\u0631\u06cc\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0686\u0647\u0627\u0631 \u0646\u0642\u0635 \u0645\u0647\u0645 \u0648 \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u0631\u0627 \u067e\u0648\u0634\u0634 \u0645\u06cc \u062f\u0647\u062f \u06a9\u0647 \u0628\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0646\u0638\u0627\u0631\u062a \u0622\u0646\u0644\u0627\u06cc\u0646 APC Easy UPS \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f. \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u062a\u06cc\u0627\u0632 \u06cc\u0627 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0634\u0648\u062f.\n\n\u062a\u0648\u0635\u06cc\u0647 \u062f\u0648\u0645 \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u062c\u0648\u0632 \u0646\u0627\u0645\u0646\u0627\u0633\u0628 \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u0631\u0627 \u062a\u0648\u0635\u06cc\u0641 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0648 \u0627\u0641\u0634\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0634\u0648\u062f.\n\n\u0622\u062e\u0631\u06cc\u0646 \u062a\u0648\u0635\u06cc\u0647 \u06cc\u06a9 \u0645\u0634\u06a9\u0644 DoS \u0628\u0627 \u0634\u062f\u062a \u0645\u062a\u0648\u0633\u0637 \u200b\u200b\u0631\u0627 \u062a\u0648\u0635\u06cc\u0641 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0631 \u0648\u0627\u062d\u062f \u067e\u0627\u06cc\u0627\u0646\u0647 \u0631\u0627\u0647 \u062f\u0648\u0631 Saitel DR (RTU) \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f.\n\n\u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0648 \u0633\u06cc\u0633\u062a\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627\u06cc\u062f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0646\u062f\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "url": "https://t.me/ics_cert/671"}, {"timestamp": "2022-12-15T18:01:05Z", "date_only": false, "value": "2022-12-15T18:01:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3834", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "c6e87e3a-9169-4fa2-ac7c-3a4f972b02ff", "content": "\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u0433\u0438\u0433\u0430\u043d\u0442\u044b Siemens \u0438 Schneider Electric \u0441\u043e\u0440\u0435\u0432\u043d\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0432 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0430\u0437 Siemens \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u043d\u0430 \u043f\u043e\u0440\u044f\u0434\u043e\u043a \u0431\u043e\u043b\u044c\u0448\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 20 \u043d\u043e\u0432\u044b\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 140 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0414\u043b\u044f \u043e\u0434\u043d\u0438\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 OpenSSL \u0438 OpenSSH, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b Scalance X-200RNA, \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 80 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0441 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439\u00bb \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u044d\u0442\u0438 \u0436\u0435 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 (XSS), \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0441\u0435\u0430\u043d\u0441\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Siemens \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0435\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0434\u0432\u0443\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c OpenSSL, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u043c \u043a\u0430\u043a CVE-2022-3602 \u0438 CVE-2022-3786.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Sicam PAS, Apogee/Talon, Mendix, Teamcenter Visualization, JT2Go, Scalance, Simatic, Parasolid, Ruggedcom \u0438 Simcenter STAR-CCM+ \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0438\u0445.\n\n\u0412 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, DoS-\u0430\u0442\u0430\u043a, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439.\n\n\u041e\u0434\u043d\u0430\u043a\u043e Siemens \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0438 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u0437 \u043d\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043f\u043e\u0437\u0436\u0435, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u0438 \u043b\u043e\u043a\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0433\u0440\u043e\u0437.\n\n\u0412 Schneider Electric \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e 3 \u043d\u043e\u0432\u044b\u0445 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c.\n\n\u0421\u0430\u043c\u0430\u044f \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f \u043a\u043e\u0441\u043d\u0443\u043b\u0430\u0441\u044c \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 APC Easy UPS, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438\u043b\u0438 \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 DoS \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b (RTU) Saitel DR.\n\n\u0414\u043b\u044f \u0432\u0441\u0435\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.", "url": "https://t.me/true_secator/3834"}, {"timestamp": "2022-12-19T00:00:00Z", "date_only": false, "value": "2022-12-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1117", "record": "CERTFR-2022-AVI-1117", "field": "last_revision_date"}, {"timestamp": "2022-12-19T00:00:00Z", "date_only": false, "value": "2022-12-19T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1117", "record": "CERTFR-2022-AVI-1117", "field": "initial_release_date"}, {"timestamp": "2022-12-19T00:00:00Z", "date_only": false, "value": "2022-12-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1117", "record": "CERTFR-2022-AVI-1117", "field": "revisions.0.revision_date"}, {"timestamp": "2022-12-20T12:32:21Z", "date_only": false, "value": "2022-12-20T12:32:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2022:4586-1", "record": "SUSE-SU-2022:4586-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-20T12:32:21Z", "date_only": false, "value": "2022-12-20T12:32:21Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2022:4586-1", "record": "SUSE-SU-2022:4586-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-12-20T12:32:21Z", "date_only": false, "value": "2022-12-20T12:32:21Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2022:4586-1", "record": "SUSE-SU-2022:4586-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-12-20T12:32:21Z", "date_only": false, "value": "2022-12-20T12:32:21Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2022:4586-1", "record": "SUSE-SU-2022:4586-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-12-20T12:32:21Z", "date_only": false, "value": "2022-12-20T12:32:21Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2022:4586-1", "record": "SUSE-SU-2022:4586-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-12-20T23:00:00Z", "date_only": false, "value": "2022-12-20T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-005-03", "record": "ICSA-23-005-03", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-23-005-03", "record": "ICSA-23-005-03", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-23-005-03", "record": "ICSA-23-005-03", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-01-19T00:00:00Z", "date_only": false, "value": "2023-01-19T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-019-01", "record": "ICSA-23-019-01", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-01-19T00:00:00Z", "date_only": true, "value": "2023-01-19", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-01-19T00:00:00Z", "date_only": false, "value": "2023-01-19T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-23-019-01", "record": "ICSA-23-019-01", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-01-19T00:00:00Z", "date_only": false, "value": "2023-01-19T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-23-019-01", "record": "ICSA-23-019-01", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-01-19T15:47:00Z", "date_only": false, "value": "2023-01-19T15:47Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-01-24T23:00:00Z", "date_only": false, "value": "2023-01-24T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2023-03-02T23:00:00Z", "date_only": false, "value": "2023-03-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-03-02T23:00:00Z", "date_only": false, "value": "2023-03-02T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-03-02T23:00:00Z", "date_only": false, "value": "2023-03-02T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-03-13T16:35:52Z", "date_only": false, "value": "2023-03-13T16:35:52Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2022:7288", "record": "ALSA-2022:7288", "field": "modified"}, {"timestamp": "2023-03-22T23:00:00Z", "date_only": false, "value": "2023-03-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-04-03T22:00:00Z", "date_only": false, "value": "2023-04-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-04-11T00:00:00Z", "date_only": false, "value": "2023-04-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-04-11T00:00:00Z", "date_only": false, "value": "2023-04-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-12", "record": "ICSA-22-349-12", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-04-11T00:00:00Z", "date_only": false, "value": "2023-04-11T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-05-18T22:00:00Z", "date_only": false, "value": "2023-05-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-05-18T22:00:00Z", "date_only": false, "value": "2023-05-18T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-05-30T22:00:00Z", "date_only": false, "value": "2023-05-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0427", "record": "CERTFR-2023-AVI-0427", "field": "last_revision_date"}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0427", "record": "CERTFR-2023-AVI-0427", "field": "initial_release_date"}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0427", "record": "CERTFR-2023-AVI-0427", "field": "revisions.0.revision_date"}, {"timestamp": "2023-06-13T13:10:24Z", "date_only": false, "value": "2023-06-13T13:10:24Z", "kind": "other", "label": "Updated", "source": "osv_rustsec \u00b7 RUSTSEC-2022-0065", "record": "RUSTSEC-2022-0065", "field": "modified"}, {"timestamp": "2023-07-11T00:00:00Z", "date_only": false, "value": "2023-07-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-07-11T00:00:00Z", "date_only": false, "value": "2023-07-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-12", "record": "ICSA-22-349-12", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-07-11T00:00:00Z", "date_only": false, "value": "2023-07-11T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-08-06T22:00:00Z", "date_only": false, "value": "2023-08-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1969", "record": "WID-SEC-W-2023-1969", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-06T22:00:00Z", "date_only": false, "value": "2023-08-06T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1969", "record": "WID-SEC-W-2023-1969", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-06T22:00:00Z", "date_only": false, "value": "2023-08-06T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1969", "record": "WID-SEC-W-2023-1969", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-06T22:00:00Z", "date_only": false, "value": "2023-08-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1969", "record": "WID-SEC-W-2023-1969", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-08-08T22:00:00Z", "date_only": false, "value": "2023-08-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2023-08-13T22:00:00Z", "date_only": false, "value": "2023-08-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2023-08-17T06:00:00Z", "date_only": false, "value": "2023-08-17T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-229-01", "record": "ICSA-23-229-01", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-17T06:00:00Z", "date_only": false, "value": "2023-08-17T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-23-229-01", "record": "ICSA-23-229-01", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-17T06:00:00Z", "date_only": false, "value": "2023-08-17T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-23-229-01", "record": "ICSA-23-229-01", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-12-13T01:19:39.834Z", "date_only": false, "value": "2023-12-13T01:19:39.834654Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T13:07:01Z", "date_only": false, "value": "2023-12-18T13:07:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1991", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a4703978-64a0-4b11-8c50-a6416ee6ca01", "content": "#ExploitObserverAlert\n\nCVE-2022-3786\n\nDESCRIPTION: Exploit Observer has 37 entries related to CVE-2022-3786. A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\nFIRST-EPSS: 0.000750000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1991"}, {"timestamp": "2024-01-22T23:00:00Z", "date_only": false, "value": "2024-01-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2024-02-16T00:00:00Z", "date_only": false, "value": "2024-02-16T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0145", "record": "CERTFR-2024-AVI-0145", "field": "last_revision_date"}, {"timestamp": "2024-02-16T00:00:00Z", "date_only": false, "value": "2024-02-16T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0145", "record": "CERTFR-2024-AVI-0145", "field": "initial_release_date"}, {"timestamp": "2024-02-16T00:00:00Z", "date_only": false, "value": "2024-02-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0145", "record": "CERTFR-2024-AVI-0145", "field": "revisions.0.revision_date"}, {"timestamp": "2024-03-06T11:02:40.764Z", "date_only": false, "value": "2024-03-06T11:02:40.764Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-NODE-2022-3786", "record": "BIT-NODE-2022-3786", "field": "published"}, {"timestamp": "2024-04-24T22:00:00Z", "date_only": false, "value": "2024-04-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.12.date"}, {"timestamp": "2024-06-04T22:00:00Z", "date_only": false, "value": "2024-06-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.13.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12475-1", "record": "OPENSUSE-SU-2024:12475-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12479-1", "record": "OPENSUSE-SU-2024:12479-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12480-1", "record": "OPENSUSE-SU-2024:12480-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12475-1", "record": "OPENSUSE-SU-2024:12475-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12479-1", "record": "OPENSUSE-SU-2024:12479-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12480-1", "record": "OPENSUSE-SU-2024:12480-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12475-1", "record": "OPENSUSE-SU-2024:12475-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12479-1", "record": "OPENSUSE-SU-2024:12479-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12480-1", "record": "OPENSUSE-SU-2024:12480-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12475-1", "record": "OPENSUSE-SU-2024:12475-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12479-1", "record": "OPENSUSE-SU-2024:12479-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12480-1", "record": "OPENSUSE-SU-2024:12480-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-15T17:46:07.359Z", "date_only": false, "value": "2024-08-15T17:46:07.359+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-15T17:56:35.841Z", "date_only": false, "value": "2024-08-15T17:56:35.841+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1969", "record": "WID-SEC-W-2023-1969", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-25T23:00:00Z", "date_only": false, "value": "2024-11-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.14.date"}, {"timestamp": "2025-01-04T00:00:00Z", "date_only": true, "value": "2025-01-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2025-01-05T23:00:00Z", "date_only": false, "value": "2025-01-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.15.date"}, {"timestamp": "2025-01-05T23:00:00Z", "date_only": false, "value": "2025-01-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-06T00:00:00Z", "date_only": true, "value": "2025-01-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2025-01-06T09:02:30.465Z", "date_only": false, "value": "2025-01-06T09:02:30.465+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": true, "value": "2025-01-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": true, "value": "2025-01-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-01-09T00:00:00Z", "date_only": true, "value": "2025-01-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2025-01-10T00:00:00Z", "date_only": false, "value": "2025-01-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "last_revision_date"}, {"timestamp": "2025-01-10T00:00:00Z", "date_only": false, "value": "2025-01-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "initial_release_date"}, {"timestamp": "2025-01-10T00:00:00Z", "date_only": false, "value": "2025-01-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "revisions.0.revision_date"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14739-1", "record": "OPENSUSE-SU-2025:14739-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14740-1", "record": "OPENSUSE-SU-2025:14740-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14739-1", "record": "OPENSUSE-SU-2025:14739-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14740-1", "record": "OPENSUSE-SU-2025:14740-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14739-1", "record": "OPENSUSE-SU-2025:14739-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14740-1", "record": "OPENSUSE-SU-2025:14740-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14739-1", "record": "OPENSUSE-SU-2025:14739-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14740-1", "record": "OPENSUSE-SU-2025:14740-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0123", "record": "NCSC-2025-0123", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": true, "value": "2025-04-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0318", "record": "CERTFR-2025-AVI-0318", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": false, "value": "2025-04-16T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0318", "record": "CERTFR-2025-AVI-0318", "field": "last_revision_date"}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": false, "value": "2025-04-16T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0318", "record": "CERTFR-2025-AVI-0318", "field": "initial_release_date"}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": false, "value": "2025-04-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0318", "record": "CERTFR-2025-AVI-0318", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-16T08:37:39.412Z", "date_only": false, "value": "2025-04-16T08:37:39.412900Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0123", "record": "NCSC-2025-0123", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-16T08:37:39.412Z", "date_only": false, "value": "2025-04-16T08:37:39.412900Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0123", "record": "NCSC-2025-0123", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-16T08:37:39.412Z", "date_only": false, "value": "2025-04-16T08:37:39.412900Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0123", "record": "NCSC-2025-0123", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-23T13:26:54.639Z", "date_only": false, "value": "2025-04-23T13:26:54.639858Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-3786", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-23T13:26:54.639Z", "date_only": false, "value": "2025-04-23T13:26:54.639858Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-3786", "record": "FKIE_CVE-2022-3786", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-05T16:12:38.194Z", "date_only": false, "value": "2025-05-05T16:12:38.194Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-3786", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-05T16:19:57Z", "date_only": false, "value": "2025-05-05T16:19:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14905", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "e1735326-e787-425d-85bd-f9cf57a92cde", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3786\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n\n\ud83d\udccf Published: 2022-11-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T16:12:38.194Z\n\ud83d\udd17 References:\n1. https://www.openssl.org/news/secadv/20221101.txt\n2. https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c42165b5706e42f67ef8ef4c351a9a4c5d21639a", "url": "https://t.me/DarkWebInformer_CVEAlerts/14905"}, {"timestamp": "2025-05-06T06:00:00Z", "date_only": false, "value": "2025-05-06T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-10", "record": "ICSA-22-349-10", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-05-06T06:00:00Z", "date_only": false, "value": "2025-05-06T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-12", "record": "ICSA-22-349-12", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-05-06T06:00:00Z", "date_only": false, "value": "2025-05-06T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-22-349-10", "record": "ICSA-22-349-10", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-06T06:00:00Z", "date_only": false, "value": "2025-05-06T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-22-349-12", "record": "ICSA-22-349-12", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-07-24T00:00:00Z", "date_only": true, "value": "2025-07-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0622", "record": "CERTFR-2025-AVI-0622", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-07-25T00:00:00Z", "date_only": false, "value": "2025-07-25T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0622", "record": "CERTFR-2025-AVI-0622", "field": "last_revision_date"}, {"timestamp": "2025-07-25T00:00:00Z", "date_only": false, "value": "2025-07-25T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0622", "record": "CERTFR-2025-AVI-0622", "field": "initial_release_date"}, {"timestamp": "2025-07-25T00:00:00Z", "date_only": false, "value": "2025-07-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0622", "record": "CERTFR-2025-AVI-0622", "field": "revisions.0.revision_date"}, {"timestamp": "2025-08-13T11:28:25.010Z", "date_only": false, "value": "2025-08-13T11:28:25.010339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lwbpuafm3s2z", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "79f86f48-37d8-4ddd-93e7-db5d6618f35e", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3lwbpuafm3s2z"}, {"timestamp": "2025-08-27T18:26:43Z", "date_only": false, "value": "2025-08-27T18:26:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/mrmps/37e0bfc1524af08c45deece8c02b46de", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "f34f02a6-5859-4d92-9744-efb0275c9640", "url": "https://gist.github.com/mrmps/37e0bfc1524af08c45deece8c02b46de"}, {"timestamp": "2025-09-04T00:00:00Z", "date_only": true, "value": "2025-09-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "last_revision_date"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "initial_release_date"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "revisions.0.revision_date"}, {"timestamp": "2025-10-10T00:00:00Z", "date_only": true, "value": "2025-10-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0864", "record": "CERTFR-2025-AVI-0864", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-10-13T00:00:00Z", "date_only": false, "value": "2025-10-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0864", "record": "CERTFR-2025-AVI-0864", "field": "last_revision_date"}, {"timestamp": "2025-10-13T00:00:00Z", "date_only": false, "value": "2025-10-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0864", "record": "CERTFR-2025-AVI-0864", "field": "initial_release_date"}, {"timestamp": "2025-10-13T00:00:00Z", "date_only": false, "value": "2025-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0864", "record": "CERTFR-2025-AVI-0864", "field": "revisions.0.revision_date"}, {"timestamp": "2025-11-04T00:00:00Z", "date_only": true, "value": "2025-11-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0967", "record": "CERTFR-2025-AVI-0967", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2025-11-04T19:13:08.687Z", "date_only": false, "value": "2025-11-04T19:13:08.687Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-3786", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0967", "record": "CERTFR-2025-AVI-0967", "field": "last_revision_date"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": true, "value": "2025-11-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0967", "record": "CERTFR-2025-AVI-0967", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": true, "value": "2025-11-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0967", "record": "CERTFR-2025-AVI-0967", "field": "revisions.0.revision_date"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "last_revision_date"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": true, "value": "2025-11-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "revisions.0.revision_date"}, {"timestamp": "2025-11-30T00:00:00Z", "date_only": true, "value": "2025-11-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1054", "record": "CERTFR-2025-AVI-1054", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1054", "record": "CERTFR-2025-AVI-1054", "field": "last_revision_date"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1054", "record": "CERTFR-2025-AVI-1054", "field": "initial_release_date"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": true, "value": "2025-12-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1057", "record": "CERTFR-2025-AVI-1057", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1054", "record": "CERTFR-2025-AVI-1054", "field": "revisions.0.revision_date"}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1057", "record": "CERTFR-2025-AVI-1057", "field": "last_revision_date"}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1057", "record": "CERTFR-2025-AVI-1057", "field": "initial_release_date"}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1057", "record": "CERTFR-2025-AVI-1057", "field": "revisions.0.revision_date"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": false, "value": "2026-02-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0199", "record": "CERTFR-2026-AVI-0199", "field": "last_revision_date"}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": true, "value": "2026-02-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0199", "record": "CERTFR-2026-AVI-0199", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": false, "value": "2026-02-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0199", "record": "CERTFR-2026-AVI-0199", "field": "revisions.0.revision_date"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-14T08:58:03.787Z", "date_only": false, "value": "2026-04-14T08:58:03.787Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-3786", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-14T08:58:03.787Z", "date_only": false, "value": "2026-04-14T08:58:03.787Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens-SADP", "record": "CVE-2022-3786", "field": "containers.adp.2.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-15T16:33:45.436Z", "date_only": false, "value": "2026-04-15T16:33:45.436947Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-16T06:00:00Z", "date_only": false, "value": "2026-04-16T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-04-16T06:00:00Z", "date_only": false, "value": "2026-04-16T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-22T07:41:22Z", "date_only": false, "value": "2026-04-22T07:41:22Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-3786", "record": "UBUNTU-CVE-2022-3786", "field": "modified"}, {"timestamp": "2026-06-17T05:00:18.193Z", "date_only": false, "value": "2026-06-17T05:00:18.193", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-3786", "record": "FKIE_CVE-2022-3786", "field": "lastModified"}, {"timestamp": "2026-07-26T02:02:36.599Z", "date_only": false, "value": "2026-07-26T02:02:36.599942Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/837", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "588aaf18-844e-47e6-9733-9f812b6fb2bb", "url": "https://t.me/EchelonEyes/837"}, {"timestamp": "2026-07-27T00:01:12.591Z", "date_only": false, "value": "2026-07-27T00:01:12.591680Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/837", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "650e607d-fca2-46f3-91c0-261871a8e828", "url": "https://t.me/EchelonEyes/837"}, {"timestamp": "2026-07-28T06:00:04.591Z", "date_only": false, "value": "2026-07-28T06:00:04.591007Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/837", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "d73bc658-5721-493b-8cbc-f4f746865b48", "url": "https://t.me/EchelonEyes/837"}, {"timestamp": "2026-07-29T00:00:46.448Z", "date_only": false, "value": "2026-07-29T00:00:46.448578Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/837", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "e1c610b4-f6f8-406c-acf7-c338587ed8aa", "url": "https://t.me/EchelonEyes/837"}, {"timestamp": "2026-07-29T12:00:52.999Z", "date_only": false, "value": "2026-07-29T12:00:52.999116Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/5832", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "05e099bc-57d9-41c8-ad8b-7f68eba8f5b0", "url": "https://t.me/CVEhub/5832"}, {"timestamp": "2026-07-29T12:02:37.874Z", "date_only": false, "value": "2026-07-29T12:02:37.874598Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2823", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "508f5e96-1ae2-4e56-a89b-049893c69334", "url": "https://t.me/reverseame/2823"}, {"timestamp": "2026-07-29T12:03:11.588Z", "date_only": false, "value": "2026-07-29T12:03:11.588808Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2017", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "c26b48b2-0787-4ab4-a90e-57ad358c3112", "url": "https://t.me/cisoclub/2017"}, {"timestamp": "2026-07-30T00:01:30.351Z", "date_only": false, "value": "2026-07-30T00:01:30.351539Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/5832", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "5254b95f-3434-45b1-906b-1a6da8dc77c9", "url": "https://t.me/CVEhub/5832"}, {"timestamp": "2026-07-30T00:02:34.215Z", "date_only": false, "value": "2026-07-30T00:02:34.215734Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2823", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "34f4515e-5aab-418b-a891-6b9d903cda14", "url": "https://t.me/reverseame/2823"}, {"timestamp": "2026-07-30T00:02:58.689Z", "date_only": false, "value": "2026-07-30T00:02:58.689199Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2017", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "1c4af2b4-3489-4163-99e6-c209631628f8", "url": "https://t.me/cisoclub/2017"}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-XH93530", "record": "CLEANSTART-2026-XH93530", "field": "published"}, {"timestamp": "2026-07-31T20:00:04.622Z", "date_only": false, "value": "2026-07-31T20:00:04.622885Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/5832", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "ef1c56e2-4cb2-4638-837e-f3db36d433b3", "url": "https://t.me/CVEhub/5832"}, {"timestamp": "2026-08-01T00:00:24.593Z", "date_only": false, "value": "2026-08-01T00:00:24.593918Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/5832", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "f6064da8-388b-4a72-88e5-7314b31eb6de", "url": "https://t.me/CVEhub/5832"}, {"timestamp": "2026-08-02T22:20:56.647Z", "date_only": false, "value": "2026-08-02T22:20:56.647678Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2823", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "9b9f6f15-f909-41ef-aa91-f09cab6f8225", "url": "https://t.me/reverseame/2823"}, {"timestamp": "2026-08-03T00:46:31.341Z", "date_only": false, "value": "2026-08-03T00:46:31.341513Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2823", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "bf932124-49f3-4970-9184-3afee26ad42d", "url": "https://t.me/reverseame/2823"}, {"timestamp": "2026-08-03T21:00:03.935Z", "date_only": false, "value": "2026-08-03T21:00:03.935710Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2017", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "663e87c7-b842-416b-bef3-9577c985e48c", "url": "https://t.me/cisoclub/2017"}, {"timestamp": "2026-08-04T00:00:12.952Z", "date_only": false, "value": "2026-08-04T00:00:12.952806Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2017", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "03667c15-9054-469a-883f-9aba04886c8b", "url": "https://t.me/cisoclub/2017"}, {"timestamp": "2026-08-04T21:34:44Z", "date_only": false, "value": "2026-08-04T21:34:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-04T21:34:44Z", "date_only": false, "value": "2026-08-04T21:34:44+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-04T21:34:44Z", "date_only": false, "value": "2026-08-04T21:34:44+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-01T17:00:25.357Z", "date_only": false, "value": "2026-09-01T17:00:25.357360Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6298", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "bdf284a3-e13d-4880-8bf0-8b81ae13b81d", "url": "https://t.me/cissp/6298"}, {"timestamp": "2026-09-01T20:01:06.813Z", "date_only": false, "value": "2026-09-01T20:01:06.813897Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/85339", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "910140da-6ed7-401a-b5d0-1512c8a762c9", "url": "https://t.me/hacking_Attack/85339"}, {"timestamp": "2026-09-01T20:01:11.428Z", "date_only": false, "value": "2026-09-01T20:01:11.428905Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/85337", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "0a80950a-e34e-4c07-84ed-16914f9eae34", "url": "https://t.me/hacking_Attack/85337"}, {"timestamp": "2026-09-05T00:00:10.558Z", "date_only": false, "value": "2026-09-05T00:00:10.558680Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/85337", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "88ad51f4-27d1-41b2-b29c-9fc49711535d", "url": "https://t.me/hacking_Attack/85337"}, {"timestamp": "2026-09-05T00:00:10.702Z", "date_only": false, "value": "2026-09-05T00:00:10.702386Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/85339", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "437d3a78-fae8-4ace-b3a8-75b60a64e7f1", "url": "https://t.me/hacking_Attack/85339"}, {"timestamp": "2026-09-17T01:07:20.127Z", "date_only": false, "value": "2026-09-17T01:07:20.127306Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-GK72927", "record": "CLEANSTART-2026-GK72927", "field": "published"}, {"timestamp": "2026-09-18T10:30:11.250Z", "date_only": false, "value": "2026-09-18T10:30:11.250041Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-PY31996", "record": "CLEANSTART-2026-PY31996", "field": "published"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-GK72927", "record": "CLEANSTART-2026-GK72927", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-XH93530", "record": "CLEANSTART-2026-XH93530", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-GK72927", "record": "CLEANSTART-2026-GK72927", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-XH93530", "record": "CLEANSTART-2026-XH93530", "field": "withdrawn"}, {"timestamp": "2026-09-20T11:23:38Z", "date_only": false, "value": "2026-09-20T11:23:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:39:26Z", "date_only": false, "value": "2026-09-20T20:39:26Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:39:26Z", "date_only": false, "value": "2026-09-20T20:39:26Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:39:34Z", "date_only": false, "value": "2026-09-20T20:39:34Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12475-1", "record": "OPENSUSE-SU-2024:12475-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:39:34Z", "date_only": false, "value": "2026-09-20T20:39:34Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12475-1", "record": "OPENSUSE-SU-2024:12475-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:39:40Z", "date_only": false, "value": "2026-09-20T20:39:40Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12479-1", "record": "OPENSUSE-SU-2024:12479-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:39:40Z", "date_only": false, "value": "2026-09-20T20:39:40Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12479-1", "record": "OPENSUSE-SU-2024:12479-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:39:41Z", "date_only": false, "value": "2026-09-20T20:39:41Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12480-1", "record": "OPENSUSE-SU-2024:12480-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:39:41Z", "date_only": false, "value": "2026-09-20T20:39:41Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12480-1", "record": "OPENSUSE-SU-2024:12480-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:26:30Z", "date_only": false, "value": "2026-09-20T21:26:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14739-1", "record": "OPENSUSE-SU-2025:14739-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:26:30Z", "date_only": false, "value": "2026-09-20T21:26:30Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14739-1", "record": "OPENSUSE-SU-2025:14739-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:26:31Z", "date_only": false, "value": "2026-09-20T21:26:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14740-1", "record": "OPENSUSE-SU-2025:14740-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:26:31Z", "date_only": false, "value": "2026-09-20T21:26:31Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14740-1", "record": "OPENSUSE-SU-2025:14740-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-09T04:39:19Z", "date_only": false, "value": "2026-10-09T04:39:19Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-PY31996", "record": "CLEANSTART-2026-PY31996", "field": "modified"}, {"timestamp": "2026-10-11T11:23:45Z", "date_only": false, "value": "2026-10-11T11:23:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:23:45Z", "date_only": false, "value": "2026-10-11T11:23:45Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T09:07:50.945Z", "date_only": false, "value": "2026-10-16T09:07:50.945Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-NODE-2022-3786", "record": "BIT-NODE-2022-3786", "field": "modified"}, {"timestamp": "2026-10-20T06:47:15Z", "date_only": false, "value": "2026-10-20T06:47:15Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-NT43765", "record": "CLEANSTART-2026-NT43765", "field": "modified"}, {"timestamp": "2026-10-21T00:36:52.544Z", "date_only": false, "value": "2026-10-21T00:36:52.544853Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-NT43765", "record": "CLEANSTART-2026-NT43765", "field": "published"}]}